GaanaGawaana 1.0 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

PT-2023-20735 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A problematic issue was found in the products.php file, where the manipulation of the search argument leads to cross-site scripting. This can be exploited remotely...

Team Circle Image Slider With Lightbox < 1.0.18 - Reflected Cross-Site Scripting

The plugin does not properly sanitize and escape the 'searchterm' parameter, leading to Reflected Cross-Site Scripting vulnerability...

bgERP v22.31 (Orlovets) - Cookie Session vulnerability / Cross-Site Scripting Vulnerabilities

Title: bgERP v22.31 Orlovets - Cookie Session vulnerability & Cross-Site Scripting XSS Author: nu11secur1ty Vendor: https://bgerp.com/Bg/Za-sistemata Software: https://github.com/bgerp/bgerp/releases/tag/v22.31 Reference:...

Sql injection

Online Student Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /eduauth/student/search.php...

CVE-2023-27213

Online Student Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /eduauth/student/search.php...

PT-2023-16730 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Doctors Appointment System version 1.0 Description: A critical issue has been found in the Parameter Handler component of the /admin/patient.php file, where the manipulation of the search argument leads to sql injection. This...

SUSE CVE-2013-4415

Multiple cross-site scripting XSS vulnerabilities in Spacewalk and Red Hat Network RHN Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the 1 whereCriteria variable in a software channels search; 2 endyear, 3 starthour, 4 endampm, 5 endday, 6 endhour, 7 endminute, 8...

SUSE CVE-2020-10802

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a...

CVE-2023-22936 Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘searchlistener’ parameter in a search allows for a blind server-side request forgery SSRF by an authenticated user. The initiator of the request cannot see the response without the presence of an additional vulnerability within t...

PT-2023-18778 · Splunk · Splunk Enterprise

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 8.1.13 Splunk Enterprise versions prior to 8.2.10 Splunk Enterprise versions prior to 9.0.4 Description: The issue allows a search to bypass safeguards for risky commands using the...

CVE-2023-25241

bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

Cross site scripting

bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

CVE-2023-25241

bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

CVE-2023-25241

bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

CVE-2023-25241

bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

CVE-2023-25241

CVE-2023-25241 affects bgERP v22.31 and is a reflected cross-site scripting (XSS) vulnerability exploitable via the Search parameter. The issue is categorized as CVSS v3.1 with base score 6.1 (Medium), with Network attack vector, no privileges required, user interaction required, and a changed sc...

PT-2023-20001

Name of the Vulnerable Software and Affected Versions bgERP version 22.31 Description A reflected cross-site scripting XSS issue was found, which can be exploited via the Search parameter. This allows an attacker to inject malicious scripts into the website, potentially leading to unauthorized...

CVE-2023-25241: Improper Neutralization of Input During Web Page Generation

bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

CVE-2022-4279

A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0. Affected is an unknown function of the file /hrm/employeeview.php. The manipulation of the argument search leads to cross site scripting. It is possible to launch the attack remotely...